fidelityan[.]cyou

Analysis indicates that fidelityan.cyou is an active phishing domain targeting financial services, specifically mimicking Fidelity Bank. The domain was registered on July 31, 2026, through GLOBAL ASSET DOMAINS INC, a registrar frequently associated with high-risk domains. It resolves to the IP address 45.92.170.20, which has been linked to other suspicious infrastructure in recent threat intelligence reports. The domain is currently flagged by two security blocklists, PhishDestroy and OpenPhish, and is classified as a social engineering threat by Google Safe Browsing.

VirusTotal reports that 5 out of 91 security vendors detect this domain as malicious, reinforcing its high-risk status. Infrastructure analysis reveals the use of nameservers a.share-dns.com, b.share-dns.net, ns1.gadomains.com, and ns2.gadomains.com, which are commonly utilized by threat actors to maintain resilience against takedowns. The domain remains active as of August 02, 2026, with no indications of suspension or deactivation. While the exact content of the site has not been fully analyzed, the combination of its recent registration, association with known malicious infrastructure, and detection by multiple security vendors strongly suggests it is part of a phishing campaign targeting Fidelity Bank customers.

Defenders should treat this domain as a confirmed threat and implement blocking measures at the DNS, proxy, or endpoint level. Organizations are advised to monitor for connections to 45.92.170.20 or the domain itself in network logs, as these may indicate compromised endpoints or ongoing phishing attempts. Given the domain's recent creation and active status, further monitoring of associated infrastructure is recommended to identify related threats.